As soon as a filter matches, to optimize performance, all other filters are skipped since the email has already been detected as spam. So in your example, as the "MAPS RBL" filter tags the email as spam, this filter acts before the blacklist keyword, causing the NULL option in the blacklist keyword to not being checked.

To remove all such emails (with the subject vigarra) you could schedule a query to run against the database to search for and delete such emails.

Thanks Roberto. You may have a good reason not to but I think it would be useful if the admin controlled filters took priority over the external ones. It would give the admin more granular control. Just a thought.

I ran into this issue and ended up writing a routine that deleted quarantined items that matched the keywords. One user was getting hammered (10+ per second) with identical emails, and they had 30,000 quarantined emails by 8am.

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot delete your posts in this forumYou cannot edit your posts in this forumYou cannot create polls in this forumYou cannot vote in polls in this forum